MIT Kerberos and OpenAFS for Windows issues
When getting Kerberos tickets using MIT Kerberos Leash Manager you get error saying "Ticket Initialization failed. Clock skew too great"
This error is usually due to large difference between the time stamp stored in your kerberos ticket and the network servers on the internet. The difference can be as small as three minutes in order to cause trouble. You need to change your computer's clock settings to reflect the actual time on the network time servers. Before changing the time shutdown all applications that require kerberos tickets. We also recommend to synchronize time to time.mit.edu using Leash Manager.The user can not login using their CSAIL ID and password after joining the windows machine to Active directory using Manual method or Automatic installation. You get error message saying something like "your username or password is incorrect" even when you are typing right password.
This is because your CSAIL principle does not contain RC4-HMAC authentication required for windows. You should change your CSAIL Kerberos password. Once you change your password you should be able to login using CSAIL account. You can change your password using "passwd" command from login.csail.mit.edu. See changing password for details.
